Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.mft
File: fcVd3aQUJAJp8Fv46M1wgTXdfeU.mft (raw, json)
Hash identifier: xzx4D1lCP/3IeCb0Xcxj3dMtp1yHxVJ4+1Ovo6PJSGU=
Subject key identifier: 19:7E:55:74:78:B6:B8:38:97:07:AA:BB:13:7F:9B:ED:12:5A:71:00
Authority key identifier: 7D:C5:5D:DD:A4:14:24:02:69:F0:5B:F8:E8:CD:70:81:35:DD:7D:E5
Certificate issuer: /CN=7dc55ddda414240269f05bf8e8cd708135dd7de5
Certificate serial: 0194BD4EC57D27E17BEF8796B8FB94D14CBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcVd3aQUJAJp8Fv46M1wgTXdfeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.mft
Manifest number: 0137
Signing time: Fri 31 Jan 2025 17:00:43 +0000
Manifest this update: Fri 31 Jan 2025 17:00:43 +0000
Manifest next update: Sat 01 Feb 2025 17:00:43 +0000
Files and hashes: 1: fcVd3aQUJAJp8Fv46M1wgTXdfeU.crl (hash: sKlDoEVXOJwh4W91a8qDvFaeZPI0uu5mCgommpuCPpU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:c5:7d:27:e1:7b:ef:87:96:b8:fb:94:d1:4c:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dc55ddda414240269f05bf8e8cd708135dd7de5
Validity
Not Before: Jan 31 17:00:43 2025 GMT
Not After : Feb 1 17:00:43 2025 GMT
Subject: CN=197e557478b6b8389707aabb137f9bed125a7100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:96:9c:1f:e9:f5:94:4c:2a:3d:47:30:13:02:
85:42:3a:74:92:79:a3:07:f5:51:ba:4d:1c:29:cc:
1e:cb:02:44:6d:7d:52:e7:3d:ac:a8:35:80:5d:dd:
a3:d9:ef:e4:f0:94:56:1a:4c:a0:ee:22:67:7a:1e:
9a:0f:d2:b8:b3:71:08:29:9b:19:67:55:63:6f:f0:
0c:d0:e0:85:da:69:ea:b3:ee:bf:88:49:15:84:86:
cf:1a:fa:f9:52:ac:2a:e5:b5:e3:ca:8e:ca:76:66:
23:9c:44:ba:10:68:2e:04:64:b5:f6:83:8f:33:07:
09:6f:ec:91:30:8b:ea:8d:2a:1e:4b:1a:01:85:2a:
d6:40:32:7e:a4:d8:bc:6a:04:f7:eb:9a:a7:10:45:
32:1d:5b:99:3d:5a:ea:90:d0:3c:ed:5a:8a:72:f2:
b0:14:29:c6:e5:75:2b:ce:58:ca:08:c1:15:f8:3d:
5e:db:20:9f:78:e0:e2:4f:4d:fb:8a:23:bc:5b:a8:
05:16:e8:b9:4e:33:c6:40:dc:92:f6:e3:6d:c1:fc:
c8:b4:26:77:cc:46:4f:1e:19:ac:ce:99:16:04:56:
7e:7c:d0:1d:68:b4:d2:9e:d0:76:59:43:cc:cc:c6:
86:e1:b8:fc:6d:04:3e:7e:ba:0c:eb:8a:50:1b:6f:
62:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:7E:55:74:78:B6:B8:38:97:07:AA:BB:13:7F:9B:ED:12:5A:71:00
X509v3 Authority Key Identifier:
keyid:7D:C5:5D:DD:A4:14:24:02:69:F0:5B:F8:E8:CD:70:81:35:DD:7D:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcVd3aQUJAJp8Fv46M1wgTXdfeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:88:76:e9:88:b1:79:b1:6d:b0:f7:11:34:bf:91:0e:3e:fe:
20:38:40:05:ab:03:90:c5:ee:e1:b8:a7:0b:89:4d:50:b5:f3:
42:7c:cf:02:2f:6d:1b:5b:bb:e5:88:df:4e:e9:42:39:fe:b5:
3a:17:21:90:0e:bd:85:69:50:8e:2b:7f:da:2e:74:97:a0:9b:
c6:0c:e4:9c:0a:b5:da:13:51:1c:a8:4f:7b:03:d6:65:37:e8:
76:5d:ee:5e:ce:ff:80:0f:1e:5e:b0:af:83:ab:5f:09:3c:84:
1c:e7:5a:42:a5:c5:2c:d1:4f:57:3f:ca:62:9a:36:26:79:23:
0d:5b:c6:e2:5f:5f:b5:ff:ef:31:4d:f3:15:74:f0:63:64:9a:
e8:8a:7e:d5:fd:4b:77:15:45:40:c1:80:19:f5:96:ef:61:e9:
c2:d2:dc:bf:4e:5b:9d:47:0a:44:45:c0:7e:28:a9:4b:79:00:
ca:71:1b:ba:9a:b1:d7:6d:4c:e9:e4:e4:53:2c:b7:b0:47:f1:
52:33:f3:f3:d6:e1:34:05:a9:14:05:61:8d:fe:75:89:f3:fe:
3e:01:b3:f2:ed:3a:96:a7:ae:ee:4a:eb:5f:10:be:73:42:ea:
c7:c1:61:5c:1c:83:c6:81:1a:33:b2:2d:33:ea:46:91:89:0e:
74:fa:47:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:13 2025 by rpki-client